Revision ec0d9bef
Added by Renato Botelho about 15 years ago
| etc/inc/filter.inc | ||
|---|---|---|
| 813 | 813 |
$reflection_txt[] = "{$inetdport}\tdgram\tudp\tnowait/0\tnobody\t/usr/bin/nc\tnc -u -w {$reflectiontimeout} {$target} {$tda}\n";
|
| 814 | 814 |
$inetdport++; |
| 815 | 815 |
} |
| 816 |
$natrules .= "{$nordr}rdr on {$rdr_if_list} proto {$protocol} from {$srcaddr} to {$dstaddr} port {$rflctintrange} tag PFREFLECT -> 127.0.0.1 port {$rflctrange}\n";
|
|
| 816 |
$natrules .= "{$nordr}rdr on {$rdr_if_list} proto {$protocol} from {$srcaddr} to {$dstaddr} port {$rflctintrange} tag PFREFLECT" .
|
|
| 817 |
($nordr == "" ? " -> 127.0.0.1 port {$rflctrange}" : "") . "\n";
|
|
| 817 | 818 |
break; |
| 818 | 819 |
case "tcp": |
| 819 | 820 |
case "udp": |
| ... | ... | |
| 829 | 830 |
$reflection_txt[] = "{$inetdport}\t{$socktype}\t{$protocol}\tnowait/0\tnobody\t/usr/bin/nc\tnc {$dash_u}-w {$reflectiontimeout} {$target} {$tda}\n";
|
| 830 | 831 |
$inetdport++; |
| 831 | 832 |
} |
| 832 |
$natrules .= "{$nordr}rdr on {$rdr_if_list} proto {$protocol} from {$srcaddr} to {$dstaddr} port {$rflctintrange} tag PFREFLECT -> 127.0.0.1 port {$rflctrange}\n";
|
|
| 833 |
$natrules .= "{$nordr}rdr on {$rdr_if_list} proto {$protocol} from {$srcaddr} to {$dstaddr} port {$rflctintrange} tag PFREFLECT" .
|
|
| 834 |
($nordr == "" ? " -> 127.0.0.1 port {$rflctrange}" : "") . "\n";
|
|
| 833 | 835 |
break; |
| 834 | 836 |
} |
| 835 | 837 |
} |
| ... | ... | |
| 1151 | 1153 |
} |
| 1152 | 1154 |
|
| 1153 | 1155 |
if($rule['associated-rule-id'] == "pass") |
| 1154 |
$rdrpass = "pass"; |
|
| 1156 |
$rdrpass = "pass ";
|
|
| 1155 | 1157 |
else |
| 1156 | 1158 |
$rdrpass = ""; |
| 1157 | 1159 |
if(!$rule['interface']) |
| ... | ... | |
| 1178 | 1180 |
if($srcaddr <> "" && $dstaddr <> "") {
|
| 1179 | 1181 |
/* is rule a port range? */ |
| 1180 | 1182 |
if($natif) |
| 1181 |
$natrules .= "{$nordr}rdr {$rdrpass} on {$natif} proto {$protocol} from {$srcaddr} to {$dstaddr} -> {$target}{$localport}";
|
|
| 1183 |
$natrules .= "{$nordr}rdr {$rdrpass}on {$natif} proto {$protocol} from {$srcaddr} to {$dstaddr}" . ($nordr == "" ? " -> {$target}{$localport}" : "");
|
|
| 1182 | 1184 |
|
| 1183 | 1185 |
/* Does this rule redirect back to a internal host? */ |
| 1184 | 1186 |
if($dstaddr == "any" && !interface_has_gateway($rule['interface'])) {
|
Also available in: Unified diff
no rdr rules shouldon't have ->, take care of nat reflection rules either